Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: V8WLzWN18PlkI3a+lUSHdCxXGqiw/myAljvM3l9/Aig=
Subject key identifier: B5:88:1C:99:E6:2F:2F:C5:0E:45:E4:95:13:BB:FA:BE:C3:E2:73:CA
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 019A1D63513CF19D48597FF5D3DAAE08F909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 05DC
Signing time: Sat 25 Oct 2025 22:00:39 +0000
Manifest this update: Sat 25 Oct 2025 22:00:39 +0000
Manifest next update: Sun 26 Oct 2025 22:00:39 +0000
Files and hashes: 1: 0Yi_JnLw94TXhrC5nYi7nz8aE9Q.roa (hash: PcfAm6zv9EFMWgISV3l4XmKFXD7W1Vvh/DKcICx2Ck4=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: Qp62Xxo4mH9aszxaUWdmvxm23KvEtmlTWdm/devsUsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:63:51:3c:f1:9d:48:59:7f:f5:d3:da:ae:08:f9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Oct 25 22:00:39 2025 GMT
Not After : Oct 26 22:00:39 2025 GMT
Subject: CN=b5881c99e62f2fc50e45e49513bbfabec3e273ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:9e:81:60:27:99:ad:e6:3d:7c:83:cc:a6:
41:8c:f6:5a:73:bc:1e:8a:81:b6:7a:ca:de:ac:0d:
9e:90:f1:af:63:06:06:51:6f:b1:b6:00:e1:42:57:
73:b7:6b:c3:eb:af:a9:e7:69:fa:16:4e:70:24:d0:
5c:2c:10:2a:62:04:46:1c:ca:1a:a1:f9:ea:7e:1e:
ef:af:61:80:cd:4e:de:3e:a9:8f:40:f2:e0:3f:c8:
c0:68:42:79:f6:79:ed:da:9b:ac:f9:66:e9:ee:3b:
bf:0e:3b:fb:d9:9c:6c:5a:c8:48:7f:12:3d:c6:ce:
5c:5b:6c:d1:f9:af:e4:70:a0:ac:f3:bb:d4:11:bd:
e6:46:52:77:6a:c4:f2:56:8a:43:9d:f3:26:06:d2:
69:51:f6:16:35:b7:53:0b:9d:b8:b0:dc:9c:5e:dc:
2c:ee:0b:fd:6d:fd:92:e6:2e:94:5a:f1:3f:3f:21:
4e:19:37:c8:0f:2e:2d:c9:c2:9c:dc:74:e8:28:4f:
21:48:3d:14:84:b0:62:7d:96:89:83:09:1e:6a:17:
21:fd:b9:df:9a:f2:1b:87:37:c7:97:52:6b:3e:34:
46:f9:5c:b7:40:29:82:84:66:0b:99:f4:86:86:3a:
4b:0a:7d:66:68:4a:3c:3b:f6:4b:0a:15:0d:b8:44:
38:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:88:1C:99:E6:2F:2F:C5:0E:45:E4:95:13:BB:FA:BE:C3:E2:73:CA
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ee:27:03:14:4c:32:f5:cc:9d:c4:d2:5c:5c:b5:f3:69:78:
28:ec:a4:c5:da:8c:84:0c:f8:8b:24:fd:c8:67:ea:96:d0:b4:
bf:dd:c5:c9:0d:f7:7f:cf:17:67:72:b1:af:65:90:0b:45:3f:
9d:39:0e:2b:8d:89:c2:3d:8f:5f:ad:b2:0c:56:cf:ff:74:32:
4c:e8:bb:8b:16:9e:96:bd:ba:ac:e4:4b:e4:42:2f:d6:b5:15:
90:95:af:e4:67:09:54:3b:d3:b3:22:8f:97:84:cd:4e:ae:9b:
67:b3:d5:84:9b:47:ac:2c:b9:f0:4a:12:78:e1:23:1d:99:57:
62:eb:d3:d6:e6:6b:16:6d:d3:49:91:f1:96:86:96:c2:4d:13:
9c:29:3e:68:f7:82:02:06:bd:17:bd:8d:d3:51:6d:f5:bd:88:
35:35:7b:2c:8f:28:94:82:46:d2:16:22:6c:5b:81:d1:03:6c:
54:be:cd:d0:ba:18:66:23:38:a2:b7:8c:2b:bc:30:87:e6:65:
24:33:e3:6f:cc:a0:cb:69:cd:92:88:9d:ce:f4:40:70:de:e0:
03:9d:33:fe:4e:dc:36:95:33:8a:d8:92:c2:17:93:a4:a0:f1:
99:29:2f:f5:2a:6a:ba:c7:90:d1:50:a0:23:55:cf:e3:4e:af:
a3:04:08:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:17:33 2025 by rpki-client